Azure Web Application Firewall
A cloud-native web application firewall (WAF) service that provides powerful protection for web apps
Improve security for your web applications
Azure Web Application Firewall is a cloud-native service that protects web apps from common web-hacking techniques such as SQL injection and security vulnerabilities such as cross-site scripting. Deploy the service in minutes to get complete visibility into your environment and block malicious attacks.
Comprehensive protection for the Open Web Application Security Project (OWASP) top 10 security risks
Customised and managed rule sets to prevent malicious attacks at the edge
Real-time visibility into your environment and security alerts
Full REST API support to automate DevOps processes
Protect web apps with managed rule sets
Protect your web applications in just a few minutes with the latest managed and preconfigured rule sets. The Azure Web Application Firewall detection engine combined with updated rule sets increases security, reduces false positives, and improves performance.
Meet security requirements with agentless deployment
Easily deploy Azure Web Application Firewall security with no additional software agent required. Centrally define and customise rules to meet your security requirements, then apply them to protect all your web apps.
Improve visibility into security and analytics
Experience seamless integration with security information event management (SIEM) tools in Azure. Access prebuilt workbooks with Azure Sentinel and modify them to fit your organisation's needs.
Achieve organisational compliance fast
Use Azure Policy to help enforce organisational standards and assess compliance at scale for Web Application Firewall resources. Get an aggregated view to evaluate the overall state of your environment.Learn more about integration with Azure policy
Improve security and optimise performance at the edge
Deploy Azure Web Application Firewall in Azure Front Door for advanced security, scalability, and accelerated delivery of apps to global users.Explore Azure Front Door
Monitor security alerts and logs
Use Azure Monitor to track diagnostic information including security alerts and logs that provide detailed reporting on detected threats.Learn more about integration with Azure Monitor
Why trust Azure Web Application Firewall to protect your applications?
Microsoft invests more than USD 1 billion annually on cybersecurity research and development.
We employ more than 3,500 security experts dedicated to data security and privacy.
Azure has more certifications than any other cloud provider. View the comprehensive list.
Azure Web Application Firewall pricing
There are no upfront costs to use Azure Web Application Firewall—pay for only what you use.
Azure Web Application firewall resources and documentation
Trusted by companies of all sizes
Polycom gains scalability and access to global markets
Telecommunications leader Polycom uses the growing global network of Azure datacentres to achieve geo-redundancy and high levels of availability to deliver a great videoconferencing experience for users.
Eni gets a competitive edge with hub-and-spoke topology
Italian energy company Eni uses low-latency hub-and-spoke architecture on Azure to enable enterprise-grade controls and meet its high security bar.
NCR Corporation manages security with Azure Security Centre
Tech services company NCR Corporation uses Azure Security Centre as one of the most critical security tools for managing its Azure ecosystem. The single pane of glass provides an overview of security across Azure cloud deployments in real time.
Frequently asked questions about Azure Web Application Firewall
Azure Web Application Firewall is a cloud-native service that protects your web applications from bot attacks and common web vulnerabilities such as SQL injection and cross-site scripting.
Yes. Learn how to customise Web Application Firewall rules in the Azure portal.
Yes. Enable DDoS protection on Azure Virtual Network where Azure Application Gateway is deployed. This ensures that the Azure DDoS protection service also protects the application gateway virtual IP (VIP).